Stable v1.0.0 release with signed tag, reproducible platform binaries, MCPB bundles, coding-agent plugin archives, MCP Registry publication, SBOM, and signed container provenance.

What's Changed

• fix(release): sign one immutable image tag by @edithatogo in #38
• packaging: add package manager submission manifests by @edithatogo in #39
• fix(packaging): install Homebrew binary correctly by @edithatogo in #40
• docs(release): record v0.3.2 distribution evidence by @edithatogo in #41
• docs(conductor): close Homebrew tap track by @edithatogo in #42
• docs(conductor): record Scoop bucket and WinGet submission by @edithatogo in #43
• feat(mcp): add search and preprint parity tools by @edithatogo in #44
• docs: track OSF parity and registry opportunities by @edithatogo in #50
• docs: add feature matrix and maturity scorecards by @edithatogo in #55
• feat: make feature matrix generated and validated by @edithatogo in #56
• chore(conductor): archive MVP OSF Read-Only CLI track by @edithatogo in #57
• chore(conductor): archive CLI contract routing track by @edithatogo in #58
• chore(conductor): archive API client fixtures track by @edithatogo in #59
• chore(conductor): review and archive Cursor Directory track by @edithatogo in #60
• chore(conductor): review and archive Claude plugin track by @edithatogo in #61
• chore: review and archive Codex marketplace track by @edithatogo in #62
• chore(conductor): review and archive Homebrew tap track by @edithatogo in #63
• fix(packaging): correct WinGet version manifest by @edithatogo in #64
• chore(conductor): review and archive WinGet track by @edithatogo in #65
• chore(conductor): review and archive Scoop track by @edithatogo in #66
• feat(mcp): close SourceShift parity track by @edithatogo in #67
• docs(conductor): correct SourceShift review evidence by @edithatogo in #68
• feat(interop): benchmark DataLad OSF parity by @edithatogo in #70
• feat(doi): add OSF DOI resolution parity by @edithatogo in #71
• feat(preprints): add ToolUniverse OSF parity by @edithatogo in #72
• chore(conductor): archive ToolUniverse parity track by @edithatogo in #73
• feat(search): add CoLRev bibliographic export parity by @edithatogo in #74
• chore(conductor): archive CoLRev parity track by @edithatogo in #75
• feat: add JASP OSF storage parity by @edithatogo in #76
• chore: archive JASP OSF parity track by @edithatogo in #77
• feat: add deterministic OSF metadata validation by @edithatogo in #78
• chore: archive Metacheck validation track by @edithatogo in #79
• feat: enforce feature matrix issue links by @edithatogo in #81
• chore: archive feature matrix governance track by @edithatogo in #82
• feat: establish v1 launch contract by @edithatogo in #83
• chore: archive v1 launch contract track by @edithatogo in #84
• docs: correct v1 launch evidence status by @edithatogo in #85
• feat: add registry submission scorecard by @edithatogo in #86
• chore(conductor): archive registry scorecard track by @edithatogo in #87
• feat: add OSF API schema provenance contract by @edithatogo in #89
• chore(conductor): archive OSF API schema discovery track by @edithatogo in #90
• chore(security): harden workflows and dependencies by @edithatogo in #91
• feat: add MCP quality evaluation harness by @edithatogo in #88
• test(quality): add fuzzing and verified build tools by @edithatogo in #92
• Prepare registry parity and marketplace submissions by @edithatogo in #93
• Complete open issue implementation and reconciliation by @edithatogo in #94

Full Changelog: v0.3.2...v1.0.0-rc.1

What's Changed

• chore(deps): bump docker/setup-buildx-action from 3 to 4 by @dependabot[bot] in #1
• chore(deps): bump actions/upload-pages-artifact from 4 to 5 by @dependabot[bot] in #2
• chore(deps): bump actions/checkout from 4 to 6 by @dependabot[bot] in #3
• chore(deps): bump actions/deploy-pages from 4 to 5 by @dependabot[bot] in #4
• chore(deps): bump docker/login-action from 3 to 4 by @dependabot[bot] in #5
• chore(deps): bump github.com/modelcontextprotocol/go-sdk from 1.6.0 to 1.6.1 by @dependabot[bot] in #6
• chore(deps): make Renovate the active update manager by @edithatogo in #29
• chore(deps): bump codecov/codecov-action from 5 to 7 by @dependabot[bot] in #30
• chore(deps): bump ossf/scorecard-action from 2.3.1 to 2.4.3 by @dependabot[bot] in #31
• chore(deps): bump sigstore/cosign-installer from 3.9.0 to 4.1.2 by @dependabot[bot] in #32
• chore(deps): bump actions/upload-artifact from 4 to 7 by @dependabot[bot] in #33
• chore(deps): bump actions/checkout from 4 to 7 by @dependabot[bot] in #34
• fix(release): preserve module version on go install by @edithatogo in #35
• ci(release): publish tagged binary assets by @edithatogo in #36
• release: prepare asset-backed v0.3.2 by @edithatogo in #37

New Contributors

• @dependabot[bot] made their first contribution in #1
• @edithatogo made their first contribution in #29

Full Changelog: v0.3.1...v0.3.2

Patch release aligning MCPB metadata with the current MCPB schema, pinning Go 1.26.5 for the standard-library security fix, and recording the verified Glama release.

Full Changelog: v0.2.0...v0.3.0

osf-cli-go v0.1.0

Initial pre-release of the Go CLI client for the Open Science Framework.

Commands

• \osf auth whoami\ — Show authenticated OSF account
• \osf projects list|get\ — List and inspect projects
• \osf components list\ — List project components
• \osf files list|download\ — Browse and download files
• \osf completion bash|zsh|fish|powershell\ — Shell completions

Features

• JSON and human-readable output modes
• Safe atomic file downloads with conflict policies (fail/skip/overwrite)
• Path traversal and symlink escape protection
• Token redaction in errors and logs
• Cross-platform (Windows, macOS, Linux)
• 15 completed Conductor tracks with phase review evidence